Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Start/Restart Services Permissions

Posted on 2009-05-07
3
395 Views
Last Modified: 2012-05-06
What are the minimum permissions I need to grant for a user to connect to a Windows 2003 Domain Controller using the services mmc console to start and/or restart services?
0
Comment
Question by:DVation191
  • 2
3 Comments
 
LVL 84

Accepted Solution

by:
oBdA earned 500 total points
ID: 24325779
You first need to grant them the necessary permissions (read/start/stop/pause, RTOP in subinacl.exe), either through a group policy or through subinacl.exe
Check here for details:
How to grant users rights to manage services in Windows 2000
http://support.microsoft.com/kb/288129

Download details: SubInACL (SubInACL.exe)
http://www.microsoft.com/downloads/details.aspx?FamilyID=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B

In addition, you need the following for remote access:
Non-administrators cannot remotely access the Service Control Manager after you install Windows Server 2003 Service Pack 1
http://support.microsoft.com/kb/907460
0
 
LVL 20

Author Comment

by:DVation191
ID: 24325963
I have granted the appropriate permissions using SubInACL for the services themselves, but the user still cannot connect to the services using the mmc console remotely.

The last link you provided describes using sc.exe, but I want the user to be able to use the MMC console. Am I missing something?
0
 
LVL 84

Expert Comment

by:oBdA
ID: 24326222
You need to run the command described in the 907460 article *once* on the server that hosts the service(s) you want to grant remote access to.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This is my 3rd article on SCCM in recent weeks, the 1st (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/A_4466-A-beginners-guide-to-installing-SCCM2007-on-Windows-2008-R2-Server.html) dealing with installat…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question